Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,575
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,523
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

1,273 advisories

Loading
The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to... High Unreviewed
CVE-2026-78562 was published Aug 25, 2026
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and... High Unreviewed
CVE-2026-78566 was published Aug 25, 2026
The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and... High Unreviewed
CVE-2026-78478 was published Aug 25, 2026
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-14280 was published Aug 25, 2026
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice... High Unreviewed
CVE-2026-32560 was published Aug 25, 2026
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. Critical Unreviewed
CVE-2026-66587 was published Aug 24, 2026
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions. High Unreviewed
CVE-2026-66671 was published Aug 24, 2026
Unauthenticated Local File Inclusion in Måne <= 1.7 versions. High Unreviewed
CVE-2026-66670 was published Aug 24, 2026
Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions. High Unreviewed
CVE-2026-28152 was published Aug 24, 2026
Unauthenticated Local File Inclusion in Tonda < 2.6 versions. High Unreviewed
CVE-2026-28151 was published Aug 24, 2026
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions. Moderate Unreviewed
CVE-2026-66586 was published Aug 20, 2026
Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions. High Unreviewed
CVE-2025-15637 was published Aug 20, 2026
Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions. High Unreviewed
CVE-2026-28150 was published Aug 20, 2026
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions... High Unreviewed
CVE-2026-75963 was published Aug 20, 2026
Unauthenticated Local File Inclusion in Resido <= 1.5 versions. High Unreviewed
CVE-2026-73387 was published Aug 19, 2026
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions. High Unreviewed
CVE-2026-73400 was published Aug 18, 2026
Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions. High Unreviewed
CVE-2026-28570 was published Aug 18, 2026
Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions. High Unreviewed
CVE-2026-32464 was published Aug 18, 2026
Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions. High Unreviewed
CVE-2026-66657 was published Aug 13, 2026
Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions. High Unreviewed
CVE-2026-66653 was published Aug 13, 2026
Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions. High Unreviewed
CVE-2026-66656 was published Aug 13, 2026
Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. High Unreviewed
CVE-2026-66450 was published Aug 13, 2026
Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions. High Unreviewed
CVE-2026-66710 was published Aug 6, 2026
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is... Moderate Unreviewed
CVE-2026-17605 was published Aug 1, 2026
Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p... Moderate Unreviewed
CVE-2026-63302 was published Jul 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database